Intel enrichment Incident Handling: Blueprint
RCCE students will learn threat intelligence lifecycle, indicator analysis, adversary profiling, intelligence sharing frameworks, and strategic threat reporting. RCCE students will learn to transform raw threat data into actionable intelligence, profile adversary campaigns and infrastructure, prioritize threats based on organizational risk, produce intelligence products for diverse audiences, and accelerate organizational detection and response capabilities. This incident response course prepares students to act decisively during security incidents with structured workflows and clear decision frameworks. Building on core knowledge, RCCE students will learn containment, evidence collection, eradication, and recovery procedures specific to this domain. Students practice incident scenarios that build the composure, coordination, and documentation skills essential for effective incident handling.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Intel enrichment Incident Handling: Blueprint
- Execute hands-on tasks for intel enrichment
- Execute hands-on tasks for incident handling: blueprint
- Explain Course Overview fundamentals
- Execute hands-on tasks for threat intelligence — covering Intelligence lifecycle mastery.
- Execute hands-on tasks for incident handling — covering Structured response workflows.
- Execute hands-on tasks for learning outcome — covering Transform raw threat data into actionable intelligence.
- Explain Threat Intelligence Foundations fundamentals
- Execute hands-on tasks for value proposition — covering Evidence-based knowledge of, Strategic: executive risk.
- Execute hands-on tasks for threat intelligence lifecycle
- Execute hands-on tasks for planning inputs — covering Organizational risk appetite.
- Execute hands-on tasks for dissemination outputs — covering Threat briefings & advisories.
- Execute hands-on tasks for intelligence requirements & collection planning
| Module 01 | Intel Enrichment |
| Module 02 | Incident Handling: Blueprint |
| Module 03 | Course Overview |
| Module 04 | Threat Intelligence |
| Module 05 | Incident Handling |
| Module 06 | Learning Outcome |
| Module 07 | Threat Intelligence Foundations |
| Module 08 | Value Proposition |
| Module 09 | Threat Intelligence Lifecycle |
| Module 10 | Planning Inputs |
| Module 11 | Dissemination Outputs |
| Module 12 | Intelligence Requirements & Collection Planning |
| Module 13 | Priority Intelligence Requirements |
| Module 14 | What TTPs are trending this quarter? |
All hands-on labs run on Rocheston Rose X OS. Students practice intel enrichment incident handling: blueprint by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for intel enrichment
- Lab 2: Execute hands-on tasks for incident handling: blueprint
- Lab 3: Explain Course Overview fundamentals
- Lab 4: Execute hands-on tasks for threat intelligence
- Lab 5: Execute hands-on tasks for incident handling
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Intel enrichment Incident Handling: Blueprint, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI